Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/Nleevi_t1odK2SQMPlwz5kkpo1Y.roa
File: Nleevi_t1odK2SQMPlwz5kkpo1Y.roa (raw, json)
Hash identifier: DKM+JxDcrxSfZrM/04OPCw4rkiFmFEDYym5FUi8PCsQ=
Subject key identifier: 36:57:9E:BE:2F:ED:D6:87:4A:D9:24:0C:3E:5C:33:E6:49:29:A3:56
Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial: 019819F1FCA44BD05DFE9B1C587A14DF9D20
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/Nleevi_t1odK2SQMPlwz5kkpo1Y.roa
Signing time: Thu 17 Jul 2025 19:52:25 +0000
ROA not before: Thu 17 Jul 2025 19:52:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213867
IP address blocks: 62.172.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:19:f1:fc:a4:4b:d0:5d:fe:9b:1c:58:7a:14:df:9d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Validity
Not Before: Jul 17 19:52:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36579ebe2fedd6874ad9240c3e5c33e64929a356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:dc:a8:f1:11:27:09:21:d0:a0:f5:c0:32:
df:c4:6f:de:11:bd:47:a5:3b:64:69:13:27:aa:a8:
6c:11:3e:6b:19:f3:de:ac:30:45:55:bb:72:41:0c:
99:55:35:a7:8c:15:a1:86:11:85:cb:69:bc:a1:9b:
71:e9:d4:04:58:9a:df:3f:35:0b:e0:28:48:ea:6f:
12:7e:15:61:6f:cc:d5:27:bb:f3:cb:d4:9d:de:6f:
b5:e2:b7:08:af:6c:46:3b:d0:d0:08:fa:d7:da:b6:
2b:9f:d7:d1:95:e9:aa:5f:c5:01:f5:35:73:6b:dd:
43:c5:7e:a2:98:0c:1e:85:05:75:de:a8:08:48:ca:
9a:e9:a8:9c:0f:c0:62:71:75:a0:c8:a1:2a:34:ff:
7d:de:7e:4e:6b:58:7b:de:37:95:4e:fa:4c:15:82:
bc:0d:20:55:43:6e:16:84:be:8f:62:b9:17:83:00:
0e:d2:ea:91:e0:31:ad:13:03:97:01:74:5a:46:eb:
9b:11:3e:2e:fe:0a:bb:e9:b7:36:a0:97:49:01:49:
10:ca:c6:3c:cf:42:7b:3a:e4:e5:a9:91:73:01:2a:
6c:6d:d3:64:ac:7d:8b:d4:72:3a:3f:7c:ba:93:22:
cb:f1:61:11:69:20:53:2b:53:22:00:b8:43:64:b3:
ce:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:57:9E:BE:2F:ED:D6:87:4A:D9:24:0C:3E:5C:33:E6:49:29:A3:56
X509v3 Authority Key Identifier:
keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/Nleevi_t1odK2SQMPlwz5kkpo1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.172.173.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d2:eb:8c:9e:94:9d:99:4d:26:25:b2:ee:e5:86:a4:ef:c2:
2a:e7:b3:2c:35:3d:49:2e:21:12:39:a7:39:d5:26:3d:14:5f:
b8:61:f0:1f:0c:0c:f0:73:a3:a7:e4:a8:44:98:68:97:b8:cb:
d3:c5:2f:de:53:11:41:84:d9:5e:94:1c:9c:58:af:ca:03:01:
12:00:08:6e:5c:45:08:ee:dc:87:81:9d:6d:be:ca:57:e1:b7:
96:ce:c1:01:ef:5b:79:51:8a:49:7f:34:c4:3f:7f:e5:88:86:
f2:e4:25:50:26:e1:19:a8:07:f7:90:15:42:08:b0:c0:b4:76:
7f:e9:1a:5e:69:22:6d:ea:ae:71:ad:34:aa:c9:bd:70:ad:95:
65:de:4a:ac:87:14:47:a9:05:cc:e0:b1:11:96:60:5e:8a:48:
75:b3:25:4c:03:2a:62:b6:6f:52:80:e7:4b:ca:22:c0:3b:af:
65:4d:10:be:bc:d6:18:17:af:82:dc:10:98:6e:5f:a9:f4:5d:
61:04:f1:d1:07:e2:41:9a:08:16:dd:d2:73:f2:b4:82:7f:f2:
66:6a:b3:aa:06:f6:a9:75:16:2b:cb:46:4b:d5:77:cd:f3:4e:
b8:28:ce:71:e4:e5:61:69:49:56:d5:de:bb:dd:90:2b:2e:b2:
57:42:7f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:39:14 2025 by rpki-client